Restoring Active Directory groups

PowerShell vs Ntdsutil vs RecoveryManager Plus

Active Directory groups play a pivotal role in handling security permissions and authorizations across your AD environment. Unauthorized group changes like additions or deletions of users can jeopardize the security of sensitive resources by providing access to unauthorized users or by revoking users’ access to critical documents. To combat such accidents, a tool that tracks all changes made to groups would be handy. However, tracking every change using Microsoft tools or PowerShell is almost impossible.

Microsoft's PowerShell and Ntdsutil provide administrators with the ability to restore deleted groups, but they don’t offer any way to keep track of all the group membership changes that AD groups undergo. This serves as a deterrent to administrators who wish to maintain complete control over these changes. Administrators have nothing to worry about though, as they can deploy RecoveryManager Plus to overcome all these limitations of the native tools. Check out this chart to see how the native tools line up against RecoveryManager Plus.

As you can see in the chart above, while PowerShell and Ntdsutil allow administrators to restore deleted AD user objects, they are not very user-friendly and also don't provide any additional features to help manage the multiple changes that each object undergoes. RecoveryManager Plus, on the other hand, provides an efficient alternative for keeping your AD secure at all times. With options for scheduling backups, retaining multiple versions of the same user objects, and granular restoration capabilities, RecoveryManager Plus offers the best solution for handling user backups and restorations.